The Interior Ministry told about the tricks of scammers to install malware
Scammers are trying to circumvent a person's caution and force them to voluntarily download a malicious APK file to an Android device. This was announced on July 7 by the Department for the organization of the fight against the illegal use of information and communication technologies (UBK) of the Ministry of Internal Affairs of Russia.
"Malicious software does not appear in the device out of nowhere. The attackers' goal is to circumvent your caution and force you to voluntarily install a malicious APK file on your Android phone," the department's Telegram channel says.
For example, attackers may ask you to download a malicious file disguised as a telecom operator. Fraudsters in this scheme claim that due to a change in the number or tariff, a person urgently needs to make changes to the banking application, so they ask to install their "utility" program. For example, "Contract.apk", "5G.apk".
In addition, the attackers, disguised as a bank employee, talk about downloading a new version of the banking application in order to check the "bonuses" or transfer funds to a secure account. They may also mention that this is necessary to protect the account from suspicious transactions. A fake banking application may look like this: "Savings Bank.apk", "VTB.apk", "CB.apk", "Security.apk".
In addition, fraudsters can introduce themselves as employees of government agencies — from the MFC to the court. When using pressure, they will create panic and a sense of urgency, which helps to encourage malware downloads, she added."Газета.Ru ".
The attackers also send messages under the guise of an acquaintance or colleague with the phrases "look at these photos/videos", "you need a document" or "here is important information about you/ your number". As a result, a person may install a malicious file out of curiosity.
Earlier, on July 6, the UBK of the Ministry of Internal Affairs reported on a scheme in which fraudsters rent citizens' bank cards under the pretext of transactions with cryptocurrency. According to the agency, the card or personal accounts will be used for one-time withdrawal of funds that were obtained illegally. Such operations will be considered droppery.
Переведено сервисом «Яндекс Переводчик»